last executing test programs: 4m11.397027267s ago: executing program 1 (id=251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x3, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000480)="78be47b00ab3c2c0d23830f1cbff338242566449d6f055322018063871176a9df232fa976736986d5a6b5759a15c86d8a52d07f2181656ebb26cb897a4e2ac168048b4a7ddca6ee04548c9aea2ef40c66692e03e240345ac929df8cffae0641539cee77d9d9d513720ddedf7a1ad44f1ef4d83f8ed25e32be24b5affc811c027e95586a014eba165843646c44e7bf0b0a73c9a3c3170b6e6b6e4dd9ca6f99c48c03e8518d8418f56ba02cb97ffee0fb22748dc676263cd8396b6e7cb8c5132c3f259cd309a559fc280", 0xc9}], 0x1}}], 0x1, 0x20080058) 4m10.965824819s ago: executing program 1 (id=262): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) socket(0x27, 0x1, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d000005000100070000"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r0, 0x1) 4m7.676725886s ago: executing program 1 (id=257): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080081004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 4m5.035358466s ago: executing program 1 (id=275): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080081004803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 4m3.675669446s ago: executing program 1 (id=264): openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x18}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) 3m59.944555807s ago: executing program 1 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) setxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) socket(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='atkbd', 0x5) 3m49.968654097s ago: executing program 4 (id=272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000800)={0x30000000, 0x3f}) 3m48.840188597s ago: executing program 4 (id=277): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) socket(0x27, 0x1, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d000005000100070000"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r0, 0x1) 3m43.698314502s ago: executing program 32 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) setxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) socket(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='atkbd', 0x5) 3m43.599841027s ago: executing program 4 (id=285): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0x101d0}], 0x1}, 0x100a0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 3m28.960911058s ago: executing program 4 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 3m26.89378254s ago: executing program 4 (id=292): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 3m21.760239192s ago: executing program 4 (id=299): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 3m5.61719525s ago: executing program 33 (id=299): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 2m7.683521173s ago: executing program 0 (id=364): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56d, &(0x7f0000000180)="$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") socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 2m4.299058374s ago: executing program 0 (id=366): futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) 2m1.607789337s ago: executing program 0 (id=379): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 2m0.462833112s ago: executing program 0 (id=370): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r3) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 1m57.518174221s ago: executing program 0 (id=376): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x4000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x4000, 0x0) 1m54.99549713s ago: executing program 0 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x3) 1m39.408422825s ago: executing program 34 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x3) 17.562470057s ago: executing program 6 (id=583): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x7e, 0x4, 0x7, 0xfffffff2, 0x1, "6800190100000006000000000000000200", 0x36, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x1005, 0xffff2d37, 0xffffff01, 0x6, 0x10000003, 0x5, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xfffffffc, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf8, 0xe, 0x2be, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x26, 0x3, 0xa7e, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000045, 0x5f31, 0x1000d, 0x4e0, 0x1, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xbec, 0xbc45, 0x3, 0x42, 0x3], [0x4, 0x406, 0xe, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x2005, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x80005, 0x8, 0x1ef, 0x22, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x2, 0x2, 0x3, 0x2000000b, 0x4, 0x9, 0x6, 0x38, 0x800003, 0x600, 0x83, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7fe, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x40000007, 0xb, 0x5, 0x938, 0xfffffbff, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x54, 0x5, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xfffe, 0xa620, 0x1, 0x78b, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0xfffffffb, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.483780562s ago: executing program 6 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 12.161882298s ago: executing program 3 (id=603): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x11, 0x88c0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000000)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400"], 0x7) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, 0x0, 0x4048000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2400c044) write$binfmt_misc(r3, &(0x7f0000000300), 0x5b0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x1000000}) 8.202605988s ago: executing program 2 (id=619): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 6.591732303s ago: executing program 7 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6.585574904s ago: executing program 7 (id=622): openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x18}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) 6.580823475s ago: executing program 6 (id=623): openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x18}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) 6.578430655s ago: executing program 5 (id=624): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) 6.578195195s ago: executing program 3 (id=625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f088a84d", 0x0, 0xdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.254272869s ago: executing program 2 (id=626): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.112956311s ago: executing program 3 (id=627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f00000010c0)=@raw=[@generic={0xb7, 0x7}, @generic={0x7b, 0xa, 0x7, 0xfff0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x5}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.112842501s ago: executing program 5 (id=636): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000001c0)={0xb0000, 0x0, "10a3d13969215ea589261ac61dc17aaeec0c163aa3b9747789a8fe5e867476a7", 0x7, 0x9, 0x2, 0x7, 0x281}) 3.910324953s ago: executing program 5 (id=628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f00000000c0)={0xa4, 0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000080)={0x26000, 0x6000, 0x3, 0x1, 0x9}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x102, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x0, 0x6, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.901748095s ago: executing program 7 (id=629): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x4000009a}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 3.871121893s ago: executing program 6 (id=630): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000"], 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000005000000732ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.657911808s ago: executing program 3 (id=631): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000700)=[@code={0xa, 0x67, {"660f3880590fc7442400ce374265c74424020b000000c7442406000000000f0114240f01c984828bf635130000001a1a2ef2460f2cc5450f0666ba4300b800000000eff20f2cae00880000660f38812766b804008ec8"}}], 0x67}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x2, 0x5a, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xc, 0x0, 0x67, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x80, 0x9, 0x7, 0x8, 0x11, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x8c, 0x0, 0x0, 0x3f, 0x6}, {0x50000, 0x0, 0x9, 0x8, 0x2, 0x1, 0x2, 0x80, 0x0, 0xfc, 0x4}, {0x54000, 0xeeeb2000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x3, 0x80, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26}, {0x80a0000, 0x8cc}, {0xf000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xd, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.574223249s ago: executing program 5 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000005000000018010000776c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.410024232s ago: executing program 7 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.366489113s ago: executing program 2 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 3.263293929s ago: executing program 5 (id=635): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$FUSE(r3, &(0x7f0000001280)={0x2020}, 0x2020) 3.083816136s ago: executing program 7 (id=637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)='D', 0x1, 0x2800c044, &(0x7f0000000240)={0xa, 0x4001, 0xfffe, @empty, 0xfffffffd}, 0x1c) 972.564399ms ago: executing program 3 (id=638): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) setreuid(0xee00, 0xee00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "e445000000000000000008a63bdff400"}, 0x7, 0x4}) close(r1) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f00000000c0)) 963.470812ms ago: executing program 6 (id=639): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000001c0)={0xb0000, 0x0, "10a3d13969215ea589261ac61dc17aaeec0c163aa3b9747789a8fe5e867476a7", 0x7, 0x9, 0x2, 0x7, 0x281}) 960.494593ms ago: executing program 5 (id=640): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x40800) 960.348802ms ago: executing program 2 (id=641): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004080000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0xeffd, 0x0}, 0x0) 803.615283ms ago: executing program 7 (id=642): r0 = socket(0x1d, 0x2, 0x6) setresuid(0x0, 0xee00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x590, &(0x7f0000000100)={0x0, 0x9152, 0x800, 0x0, 0x212}) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xb906, 0x1, 0x4010, r2, 0x20000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000200100000c000280070002006c6f0000180003800400010008000200050000000800040004000000"], 0x38}}, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgid(0x0) getgroups(0x27, &(0x7f0000002540)) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000180)='z', 0x1}], 0x1}}], 0x1, 0x4044815) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a00)={r8, 0x20, &(0x7f00000029c0)={&(0x7f0000001980)=""/4096, 0x1000, 0x0, &(0x7f0000002980)=""/58, 0x3a}}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r11, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(r11, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 sync 2', 0x3a) ioctl(r11, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001") bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x400, 0x73, &(0x7f0000000240)=""/115, 0x41000, 0x51, '\x00', r9, @fallback=0x2a, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x6, 0xffff}, 0x10, r10, r11, 0x2, &(0x7f0000002a40)=[r8], &(0x7f0000002a80)=[{0x2, 0x1, 0x8, 0x6}, {0x0, 0x5, 0x9, 0x4}], 0x10, 0x6}, 0x94) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r9, 0x3}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000027bd7000fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x3fd}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 705.412538ms ago: executing program 3 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 682.318354ms ago: executing program 2 (id=644): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x42}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 638.532376ms ago: executing program 6 (id=645): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x9, 0x800) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x3b83, &(0x7f0000000240)={0x0, 0x59db, 0x800, 0x2, 0x2bc, 0x0, r0}, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) socket(0x2, 0x3, 0xff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 2 (id=646): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000c40)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x3, "e5e98fc5b5cfb2831235eda33e9298667970f98a48adf44012e8d76661b5a46dd9b546a0206c3e962483c5cbc38bd2a2768910ebfdc5bc04dd320135725b9503b9dc304d86891d58c8a3caa49c2f4c38336839d7c967f0d0e56180c348a080c8867c34f8fe32d16bf0d6cf3617f249e9ff55cb9f12fa3cd673fcc7516c20e3d5fe4d37b2443e74670e67fb381766d32e22083a6dc3e74ea283381b28777b279bfdd8bc76be47fc74bbe7acf8caa6e4efb78dc73397d24b945f7e8852c211dbfc29a9ef58db5f50934d18b52f0cd9ea0b31397746c98bfa62d8051a9095e7c9b434444fa85e1b"}, 0xe9) connect(0xffffffffffffffff, 0x0, 0x0) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) kernel console output (not intermixed with test programs): lready exists on: batadv_slave_1 [ 67.704050][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.720496][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.732618][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.740261][ T1108] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 67.753723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.764667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.775197][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.784305][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.802072][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.810135][ T4256] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 67.826191][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.845061][ T1108] as10x_usb: device has been detected [ 67.850953][ T1108] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 67.858984][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 67.867141][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.876021][ T4256] usb 3-1: Product: syz [ 67.880600][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.895284][ T4256] usb 3-1: Manufacturer: syz [ 67.899919][ T4256] usb 3-1: SerialNumber: syz [ 67.906611][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.918737][ T1108] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 67.931733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.999102][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.049739][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.070921][ T1108] as10x_usb: error during firmware upload part1 [ 68.087290][ T1108] Registered device Abilis Systems DVB-Titan [ 68.090934][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.169639][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.195700][ T4256] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 68.213328][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.230087][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.263583][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.276945][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.292459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.427443][ T4256] usb 3-1: USB disconnect, device number 2 [ 68.453497][ T4256] usblp1: removed [ 68.465577][ T4275] program syz.1.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.556908][ T4280] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7'. [ 68.678931][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.821401][ T4258] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xec [ 68.967151][ T4297] FAULT_INJECTION: forcing a failure. [ 68.967151][ T4297] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.981042][ T4297] CPU: 1 PID: 4297 Comm: syz.2.11 Not tainted syzkaller #0 [ 68.988267][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.998350][ T4297] Call Trace: [ 69.001649][ T4297] [ 69.004596][ T4297] dump_stack_lvl+0x188/0x250 [ 69.009298][ T4297] ? show_regs_print_info+0x20/0x20 [ 69.014520][ T4297] ? load_image+0x410/0x410 [ 69.019053][ T4297] ? mark_lock+0x94/0x320 [ 69.023400][ T4297] should_fail+0x383/0x4b0 [ 69.027842][ T4297] prepare_alloc_pages+0x1e3/0x5b0 [ 69.033005][ T4297] __alloc_pages+0x11b/0x480 [ 69.037626][ T4297] ? zone_statistics+0x170/0x170 [ 69.042588][ T4297] ? rcu_lock_acquire+0x30/0x30 [ 69.047462][ T4297] ? alloc_pages+0x452/0x560 [ 69.052077][ T4297] __get_free_pages+0x8/0x30 [ 69.056697][ T4297] __tlb_remove_page_size+0x1f2/0x3f0 [ 69.062101][ T4297] unmap_page_range+0xfcf/0x2410 [ 69.067182][ T4297] unmap_vmas+0x131/0x250 [ 69.071545][ T4297] ? unmap_page_range+0x2410/0x2410 [ 69.076761][ T4297] ? __mutex_lock_common+0x435/0x2400 [ 69.082156][ T4297] ? exit_mm_release+0x16/0x30 [ 69.086955][ T4297] exit_mmap+0x3b9/0x640 [ 69.091219][ T4297] ? vm_brk+0x20/0x20 [ 69.095240][ T4297] ? uprobe_clear_state+0x2f6/0x460 [ 69.100467][ T4297] __mmput+0x115/0x390 [ 69.104565][ T4297] exit_mm+0x632/0x7b0 [ 69.108654][ T4297] ? perf_pmu_migrate_context+0xb70/0xb70 [ 69.114405][ T4297] ? do_exit+0x2110/0x2110 [ 69.118972][ T4297] ? __ia32_sys_timer_delete+0x40/0x40 [ 69.124459][ T4297] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 69.129957][ T4297] ? tty_audit_exit+0x149/0x1f0 [ 69.134843][ T4297] do_exit+0x5b8/0x2110 [ 69.139049][ T4297] ? put_task_struct+0x80/0x80 [ 69.143840][ T4297] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 69.149875][ T4297] ? _raw_spin_lock_irq+0xb7/0xf0 [ 69.154926][ T4297] do_group_exit+0x12c/0x2f0 [ 69.159539][ T4297] ? lockdep_hardirqs_on+0x94/0x140 [ 69.164759][ T4297] get_signal+0x7eb/0x12e0 [ 69.169647][ T4297] arch_do_signal_or_restart+0xe6/0x12a0 [ 69.175302][ T4297] ? __lock_acquire+0x7b50/0x7b50 [ 69.180361][ T4297] ? futex_exit_release+0x1c0/0x1c0 [ 69.185586][ T4297] ? get_sigframe_size+0x10/0x10 [ 69.190560][ T4297] ? __context_tracking_exit+0x4c/0x80 [ 69.196069][ T4297] ? exit_to_user_mode_loop+0x3b/0x130 [ 69.201555][ T4297] exit_to_user_mode_loop+0x9e/0x130 [ 69.206866][ T4297] exit_to_user_mode_prepare+0xee/0x180 [ 69.212436][ T4297] syscall_exit_to_user_mode+0x16/0x40 [ 69.217923][ T4297] do_syscall_64+0x58/0xa0 [ 69.222515][ T4297] ? clear_bhb_loop+0x30/0x80 [ 69.227226][ T4297] ? clear_bhb_loop+0x30/0x80 [ 69.231935][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.237862][ T4297] RIP: 0033:0x7fbd78858159 [ 69.242298][ T4297] Code: Unable to access opcode bytes at RIP 0x7fbd7885812f. [ 69.249680][ T4297] RSP: 002b:00007fbd76ab00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.258120][ T4297] RAX: 0000000000000001 RBX: 00007fbd78adffa8 RCX: 00007fbd78858159 [ 69.266114][ T4297] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd78adffac [ 69.274111][ T4297] RBP: 00007fbd78adffa0 R08: 00373e999dec4b6c R09: 0000000000000000 [ 69.282111][ T4297] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 69.290104][ T4297] R13: 00007fbd78ae0038 R14: 00007ffd0306d280 R15: 00007ffd0306d368 [ 69.298119][ T4297] [ 69.309223][ T4189] Bluetooth: hci1: command 0x0419 tx timeout [ 69.327898][ T4189] Bluetooth: hci3: command 0x0419 tx timeout [ 69.344409][ T4189] Bluetooth: hci0: command 0x0419 tx timeout [ 69.355312][ T4189] Bluetooth: hci2: command 0x0419 tx timeout [ 69.369285][ T4256] Bluetooth: hci4: command 0x0419 tx timeout [ 69.779863][ T4174] usb 1-1: USB disconnect, device number 2 [ 69.799004][ T4174] Unregistered device Abilis Systems DVB-Titan [ 69.804495][ T4174] as10x_usb: device has been disconnected [ 70.003899][ T4315] FAULT_INJECTION: forcing a failure. [ 70.003899][ T4315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.020031][ T4315] CPU: 1 PID: 4315 Comm: syz.3.17 Not tainted syzkaller #0 [ 70.027275][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.037348][ T4315] Call Trace: [ 70.040775][ T4315] [ 70.043719][ T4315] dump_stack_lvl+0x188/0x250 [ 70.048418][ T4315] ? show_regs_print_info+0x20/0x20 [ 70.053638][ T4315] ? load_image+0x410/0x410 [ 70.058134][ T4315] ? __lock_acquire+0x7b50/0x7b50 [ 70.063158][ T4315] should_fail+0x383/0x4b0 [ 70.067577][ T4315] prepare_alloc_pages+0x1e3/0x5b0 [ 70.072689][ T4315] __alloc_pages+0x11b/0x480 [ 70.077277][ T4315] ? zone_statistics+0x170/0x170 [ 70.082223][ T4315] ? cpumask_next+0xa2/0xd0 [ 70.086757][ T4315] ? blk_mq_hw_queue_to_node+0xda/0x120 [ 70.092328][ T4315] blk_mq_alloc_rqs+0x254/0x700 [ 70.097201][ T4315] __blk_mq_alloc_map_and_request+0x134/0x320 [ 70.103379][ T4315] blk_mq_alloc_map_and_requests+0xd0/0x4d0 [ 70.109281][ T4315] blk_mq_alloc_tag_set+0x794/0xf30 [ 70.114488][ T4315] loop_add+0x257/0x890 [ 70.118663][ T4315] loop_control_ioctl+0x124/0x550 [ 70.123681][ T4315] ? xor_init+0x60/0x60 [ 70.127835][ T4315] ? bpf_lsm_file_ioctl+0x5/0x10 [ 70.132763][ T4315] ? security_file_ioctl+0x7c/0xa0 [ 70.137882][ T4315] ? xor_init+0x60/0x60 [ 70.142040][ T4315] __se_sys_ioctl+0xfa/0x170 [ 70.146634][ T4315] do_syscall_64+0x4c/0xa0 [ 70.151070][ T4315] ? clear_bhb_loop+0x30/0x80 [ 70.155747][ T4315] ? clear_bhb_loop+0x30/0x80 [ 70.160441][ T4315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.166328][ T4315] RIP: 0033:0x7f46ef509159 [ 70.170739][ T4315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.190351][ T4315] RSP: 002b:00007f46ed761028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.198771][ T4315] RAX: ffffffffffffffda RBX: 00007f46ef790fa0 RCX: 00007f46ef509159 [ 70.206756][ T4315] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 70.214749][ T4315] RBP: 00007f46ef5a006b R08: 0000000000000000 R09: 0000000000000000 [ 70.222735][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.230698][ T4315] R13: 00007f46ef791038 R14: 00007f46ef790fa0 R15: 00007ffc691022b8 [ 70.238673][ T4315] [ 70.372251][ T4322] misc userio: The device must be registered before sending interrupts [ 70.463466][ T4324] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 71.427096][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.434072][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.671486][ T4286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.915004][ T151] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 71.932157][ T4350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.954865][ T4351] process 'syz.0.27' launched './file0' with NULL argv: empty string added [ 72.560917][ T151] Bluetooth: hci5: Frame reassembly failed (-84) [ 72.644545][ T4227] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.037272][ T4227] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 73.045741][ T4174] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.053891][ T4227] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 73.064392][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 73.239040][ T4227] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.255212][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 73.279040][ T4227] usb 5-1: Product: syz [ 73.284666][ T4227] usb 5-1: Manufacturer: syz [ 73.289298][ T4227] usb 5-1: SerialNumber: syz [ 73.304937][ T4227] usb 5-1: config 0 descriptor?? [ 73.361680][ T4227] hub 5-1:0.0: bad descriptor, ignoring hub [ 73.369015][ T4227] hub: probe of 5-1:0.0 failed with error -5 [ 73.389991][ T4227] usb 5-1: selecting invalid altsetting 0 [ 73.470032][ T4174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 73.483867][ T4174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.511777][ T4174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 73.543262][ T4174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 73.721722][ T4174] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 73.731233][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.740755][ T4226] usb 5-1: USB disconnect, device number 2 [ 73.749163][ T4174] usb 1-1: Product: syz [ 73.753359][ T4174] usb 1-1: Manufacturer: syz [ 73.761429][ T4174] usb 1-1: SerialNumber: syz [ 73.797517][ T4174] usb 1-1: config 0 descriptor?? [ 74.056089][ T4174] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 74.240906][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 74.259156][ T4256] usb 1-1: USB disconnect, device number 3 [ 74.624460][ T4174] Bluetooth: hci5: command 0xfc11 tx timeout [ 74.632795][ T4192] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 74.829160][ T4340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.049483][ T4457] comedi comedi2: pcl724: I/O port conflict (0x2,4) [ 75.163154][ T4464] capability: warning: `syz.4.54' uses 32-bit capabilities (legacy support in use) [ 75.224005][ T4189] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.354627][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.594088][ T4189] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 75.610469][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.637856][ T4189] usb 2-1: config 1 has no interface number 0 [ 75.660079][ T4189] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 75.723989][ T1108] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.737331][ T1108] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.783496][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.822819][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 75.873976][ T4189] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 75.902073][ T4189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.915116][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 75.951205][ T4189] usb 2-1: Product: syz [ 75.964014][ T4189] usb 2-1: Manufacturer: syz [ 75.975105][ T4189] usb 2-1: SerialNumber: syz [ 76.004240][ T4448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.025423][ T4189] usb 2-1: Expected 3 endpoints, found: 2 [ 76.064232][ T1108] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.083232][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.132782][ T1108] usb 3-1: Product: syz [ 76.138049][ T1108] usb 3-1: Manufacturer: syz [ 76.205128][ T1108] cdc_wdm 3-1:1.0: skipping garbage [ 76.210443][ T1108] cdc_wdm 3-1:1.0: skipping garbage [ 76.247303][ T1108] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 76.261882][ T1108] cdc_wdm 3-1:1.0: Unknown control protocol [ 76.358611][ T4490] MD5 Hash mismatch for [fe88::101]:20003->[ff02::1]:20004 L3 index 0 [ 76.574151][ T4226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.616122][ T1108] usb 3-1: USB disconnect, device number 3 [ 76.715905][ T4500] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 76.981673][ T4226] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.998252][ T4226] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 77.019573][ T4226] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 77.053520][ T4226] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 77.078375][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.403950][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.654007][ T4226] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 77.670817][ T4226] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 77.679053][ T4226] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 77.701000][ T4226] cxacru: probe of 5-1:1.0 failed with error -71 [ 77.733696][ T4226] usb 5-1: USB disconnect, device number 3 [ 77.774231][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 77.800921][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.839434][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 77.860552][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 78.008198][ T4546] capability: warning: `syz.1.74' uses deprecated v2 capabilities in a way that may be insecure [ 78.028292][ T21] usb 2-1: USB disconnect, device number 2 [ 78.034726][ T1108] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 78.049507][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.066643][ T1108] usb 1-1: Product: syz [ 78.071028][ T1108] usb 1-1: Manufacturer: syz [ 78.076062][ T1108] usb 1-1: SerialNumber: syz [ 78.082732][ T1108] usb 1-1: config 0 descriptor?? [ 78.345841][ T1108] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 78.430590][ T4189] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.462830][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 78.478157][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 78.548382][ T4226] usb 1-1: USB disconnect, device number 4 [ 78.555604][ T4518] usb 1-1: Couldn't submit interrupt_out_urb -19 [ 78.693861][ T4189] usb 3-1: Using ep0 maxpacket: 8 [ 78.699828][ T4578] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 78.709249][ T4578] overlayfs: overlapping lowerdir path [ 78.754106][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.814876][ T4189] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.830871][ T4189] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.885349][ T4189] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.895396][ T4189] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.909023][ T4189] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.936125][ T4189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.963992][ T1108] usb 2-1: device descriptor read/64, error -71 [ 79.068098][ T4192] Bluetooth: Wrong link type (-22) [ 79.203989][ T4189] usb 3-1: GET_CAPABILITIES returned 0 [ 79.209556][ T4189] usbtmc 3-1:16.0: can't read capabilities [ 79.234060][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.371089][ T4611] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET) [ 79.423937][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.434046][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.443121][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.452161][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.461201][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.470235][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.479276][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.488492][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.497523][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.506567][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.515594][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.524631][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.533673][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.542706][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.551753][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.560823][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 79.570888][ T1108] usb 2-1: device descriptor read/64, error -71 [ 79.584078][ T21] usb 3-1: USB disconnect, device number 4 [ 79.694592][ T1108] usb usb2-port1: attempt power cycle [ 80.043926][ T4256] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.133890][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.193970][ T4174] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 80.224231][ T1108] usb 2-1: device descriptor read/8, error -71 [ 80.404644][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 80.415811][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.426485][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 80.437430][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 80.493953][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 80.584085][ T1108] usb 2-1: device descriptor read/8, error -71 [ 80.594045][ T4174] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.604055][ T4256] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 80.604413][ T4174] usb 4-1: config 0 has no interfaces? [ 80.613364][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.627159][ T4256] usb 5-1: Product: syz [ 80.631334][ T4256] usb 5-1: Manufacturer: syz [ 80.635960][ T4256] usb 5-1: SerialNumber: syz [ 80.642004][ T4256] usb 5-1: config 0 descriptor?? [ 80.704172][ T1108] usb usb2-port1: unable to enumerate USB device [ 80.794010][ T4174] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.803312][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.811743][ T4174] usb 4-1: Product: syz [ 80.816059][ T4174] usb 4-1: Manufacturer: syz [ 80.820665][ T4174] usb 4-1: SerialNumber: syz [ 80.827247][ T4174] usb 4-1: config 0 descriptor?? [ 80.905788][ T4256] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 81.073485][ T4256] usb 4-1: USB disconnect, device number 2 [ 81.122970][ T4174] usb 5-1: USB disconnect, device number 4 [ 81.125284][ T4622] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 81.828863][ T4644] netlink: 36 bytes leftover after parsing attributes in process `syz.1.112'. [ 82.636319][ T4661] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 82.666285][ T4661] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 82.882506][ T4174] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 82.963859][ T4189] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.213965][ T4189] usb 4-1: Using ep0 maxpacket: 8 [ 83.264118][ T4174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.275157][ T4174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.285193][ T4174] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.298179][ T4174] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.307268][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.317436][ T4174] usb 2-1: config 0 descriptor?? [ 83.334065][ T4189] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.344617][ T4189] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.354803][ T4189] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.365028][ T4189] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.378326][ T4189] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.387469][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.653924][ T4189] usb 4-1: GET_CAPABILITIES returned 0 [ 83.659423][ T4189] usbtmc 4-1:16.0: can't read capabilities [ 83.786555][ T4174] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 83.795418][ T4174] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 83.812381][ T4174] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 83.883841][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.893454][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.902534][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.911565][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.920613][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.929665][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.938721][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.947796][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.956854][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.965901][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.974949][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.984001][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 83.991272][ T4189] usb 2-1: USB disconnect, device number 7 [ 83.993074][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.008155][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.017225][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.026275][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 84.036102][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.080578][ T4256] usb 4-1: USB disconnect, device number 3 [ 84.089302][ T4664] fido_id[4664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 85.580101][ T4676] sched: RT throttling activated [ 85.880810][ T4687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.132'. [ 86.706717][ T4694] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 86.725476][ T4189] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.794526][ T1110] cfg80211: failed to load regulatory.db [ 86.845556][ T4700] loop2: detected capacity change from 0 to 512 [ 86.875100][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 86.880781][ T4692] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.884818][ T4700] ======================================================= [ 86.884818][ T4700] WARNING: The mand mount option has been deprecated and [ 86.884818][ T4700] and is ignored by this kernel. Remove the mand [ 86.884818][ T4700] option from the mount to silence this warning. [ 86.884818][ T4700] ======================================================= [ 86.906275][ T4692] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.016505][ T4700] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.139: bad orphan inode 15 [ 87.062419][ T4700] ext4_test_bit(bit=14, block=5) = 0 [ 87.074529][ T4700] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 87.153830][ T4189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 87.176534][ T4189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.204236][ T4189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 87.249340][ T4189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 87.259945][ T4713] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 87.282371][ T4713] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 87.433833][ T4700] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.139: bg 0: block 13: invalid block bitmap [ 87.447985][ T4189] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 87.457722][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.526832][ T4189] usb 4-1: Product: syz [ 87.531501][ T4189] usb 4-1: Manufacturer: syz [ 87.542698][ T4189] usb 4-1: SerialNumber: syz [ 87.550012][ T4189] usb 4-1: config 0 descriptor?? [ 87.766626][ T4189] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 87.810994][ T4722] loop0: detected capacity change from 0 to 512 [ 87.949492][ T4189] usb 4-1: USB disconnect, device number 4 [ 89.234408][ T4734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.146'. [ 89.336329][ T4722] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.154: bad orphan inode 15 [ 89.509922][ T4722] ext4_test_bit(bit=14, block=5) = 0 [ 89.515716][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 89.714595][ T4256] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.124624][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 90.199775][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.350347][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 90.637846][ T4174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.768405][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 90.864113][ T4256] usb 2-1: string descriptor 0 read error: -71 [ 90.870416][ T4256] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 90.913843][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.919311][ T4174] usb 5-1: Using ep0 maxpacket: 8 [ 90.960527][ T4256] usb 2-1: config 0 descriptor?? [ 90.990182][ T4256] usb 2-1: can't set config #0, error -71 [ 91.004957][ T4256] usb 2-1: USB disconnect, device number 8 [ 91.058799][ T4174] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.078908][ T4174] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.095493][ T4174] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.109567][ T4174] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.172424][ T4174] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.199224][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.504077][ T4174] usb 5-1: GET_CAPABILITIES returned 0 [ 91.512048][ T4174] usbtmc 5-1:16.0: can't read capabilities [ 91.763817][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.772964][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.782056][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.791256][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.800335][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.809413][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.818490][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.827564][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.836637][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.845717][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.854788][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.863903][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.872140][ T4752] loop1: detected capacity change from 0 to 32768 [ 91.872969][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.888630][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.897716][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.906788][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.939428][ T4174] usb 5-1: USB disconnect, device number 5 [ 91.993843][ T4256] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.099586][ T4752] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 92.134001][ T4752] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 92.141777][ T4752] XFS (loop1): DAX and reflink cannot be used together! [ 92.454156][ T4256] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.490006][ T4256] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.524969][ T4256] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.566638][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.614219][ T4762] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.978751][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.163'. [ 93.439745][ T4256] usb 1-1: USB disconnect, device number 5 [ 94.049435][ T4778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.164'. [ 94.906887][ T4785] FAULT_INJECTION: forcing a failure. [ 94.906887][ T4785] name failslab, interval 1, probability 0, space 0, times 1 [ 94.951420][ T4786] loop4: detected capacity change from 0 to 512 [ 94.960522][ T4785] CPU: 1 PID: 4785 Comm: syz.2.166 Not tainted syzkaller #0 [ 94.967851][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.977932][ T4785] Call Trace: [ 94.981229][ T4785] [ 94.984179][ T4785] dump_stack_lvl+0x188/0x250 [ 94.988885][ T4785] ? show_regs_print_info+0x20/0x20 [ 94.994111][ T4785] ? load_image+0x410/0x410 [ 94.998640][ T4785] ? __might_sleep+0xf0/0xf0 [ 95.003250][ T4785] ? __lock_acquire+0x7b50/0x7b50 [ 95.008308][ T4785] should_fail+0x383/0x4b0 [ 95.012755][ T4785] should_failslab+0x5/0x20 [ 95.017282][ T4785] slab_pre_alloc_hook+0x51/0xc0 [ 95.022333][ T4785] __kmalloc+0x6b/0x340 [ 95.026507][ T4785] ? tomoyo_encode+0x28a/0x550 [ 95.031310][ T4785] tomoyo_encode+0x28a/0x550 [ 95.035941][ T4785] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 95.041624][ T4785] tomoyo_mount_permission+0x3b8/0x9b0 [ 95.047129][ T4785] ? ____kasan_slab_free+0xd5/0x110 [ 95.052359][ T4785] ? slab_free_freelist_hook+0xec/0x170 [ 95.057937][ T4785] ? tomoyo_get_name+0x520/0x520 [ 95.062958][ T4785] security_sb_mount+0x83/0xb0 [ 95.067754][ T4785] path_mount+0xb8/0xfe0 [ 95.072025][ T4785] ? user_path_at_empty+0x13e/0x190 [ 95.077252][ T4785] __se_sys_mount+0x2e3/0x3d0 [ 95.081960][ T4785] ? __x64_sys_mount+0xc0/0xc0 [ 95.086758][ T4785] ? lockdep_hardirqs_on+0x94/0x140 [ 95.092002][ T4785] ? __x64_sys_mount+0x1c/0xc0 [ 95.096797][ T4785] do_syscall_64+0x4c/0xa0 [ 95.101245][ T4785] ? clear_bhb_loop+0x30/0x80 [ 95.105945][ T4785] ? clear_bhb_loop+0x30/0x80 [ 95.110658][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.116580][ T4785] RIP: 0033:0x7fbd78858159 [ 95.121024][ T4785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.140661][ T4785] RSP: 002b:00007fbd76ab0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.149106][ T4785] RAX: ffffffffffffffda RBX: 00007fbd78adffa0 RCX: 00007fbd78858159 [ 95.157109][ T4785] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 95.165103][ T4785] RBP: 00007fbd788ef06b R08: 0000200000002140 R09: 0000000000000000 [ 95.173101][ T4785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.181098][ T4785] R13: 00007fbd78ae0038 R14: 00007fbd78adffa0 R15: 00007ffd0306d368 [ 95.189123][ T4785] [ 95.595264][ T4785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.726878][ T4786] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.168: bad orphan inode 15 [ 95.746382][ T4786] ext4_test_bit(bit=14, block=5) = 0 [ 95.751724][ T4786] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 95.814003][ T4738] syz.3.149 (4738): drop_caches: 1 [ 96.107144][ T4801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.179'. [ 96.274121][ T4226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.664754][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 96.686400][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.727158][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 96.799168][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 96.993163][ T4786] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.168: bg 0: block 13: invalid block bitmap [ 97.025226][ T4226] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 97.052306][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.069463][ T4226] usb 3-1: Product: syz [ 97.143858][ T4226] usb 3-1: Manufacturer: syz [ 97.148519][ T4226] usb 3-1: SerialNumber: syz [ 97.180508][ T4226] usb 3-1: config 0 descriptor?? [ 97.514702][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 98.246802][ T4226] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 98.256815][ T4226] usb 3-1: USB disconnect, device number 5 [ 98.666128][ T4814] loop3: detected capacity change from 0 to 32768 [ 98.715184][ T4814] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 98.724055][ T4814] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 98.731797][ T4814] XFS (loop3): DAX and reflink cannot be used together! [ 100.535735][ T4841] FAULT_INJECTION: forcing a failure. [ 100.535735][ T4841] name failslab, interval 1, probability 0, space 0, times 0 [ 100.585628][ T4841] CPU: 0 PID: 4841 Comm: syz.0.181 Not tainted syzkaller #0 [ 100.592969][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.603054][ T4841] Call Trace: [ 100.606356][ T4841] [ 100.609301][ T4841] dump_stack_lvl+0x188/0x250 [ 100.614014][ T4841] ? show_regs_print_info+0x20/0x20 [ 100.619239][ T4841] ? load_image+0x410/0x410 [ 100.623805][ T4841] ? __might_sleep+0xf0/0xf0 [ 100.628419][ T4841] ? __lock_acquire+0x7b50/0x7b50 [ 100.633511][ T4841] should_fail+0x383/0x4b0 [ 100.637961][ T4841] should_failslab+0x5/0x20 [ 100.642487][ T4841] slab_pre_alloc_hook+0x51/0xc0 [ 100.647443][ T4841] __kmalloc+0x6b/0x340 [ 100.651619][ T4841] ? tomoyo_encode+0x28a/0x550 [ 100.656419][ T4841] tomoyo_encode+0x28a/0x550 [ 100.661036][ T4841] tomoyo_mount_permission+0x4f8/0x9b0 [ 100.666522][ T4841] ? ____kasan_slab_free+0xd5/0x110 [ 100.671740][ T4841] ? slab_free_freelist_hook+0xec/0x170 [ 100.677321][ T4841] ? tomoyo_get_name+0x520/0x520 [ 100.682339][ T4841] security_sb_mount+0x83/0xb0 [ 100.687126][ T4841] path_mount+0xb8/0xfe0 [ 100.691394][ T4841] ? user_path_at_empty+0x13e/0x190 [ 100.696613][ T4841] __se_sys_mount+0x2e3/0x3d0 [ 100.701338][ T4841] ? __x64_sys_mount+0xc0/0xc0 [ 100.706130][ T4841] ? lockdep_hardirqs_on+0x94/0x140 [ 100.711346][ T4841] ? __x64_sys_mount+0x1c/0xc0 [ 100.716143][ T4841] do_syscall_64+0x4c/0xa0 [ 100.720582][ T4841] ? clear_bhb_loop+0x30/0x80 [ 100.725306][ T4841] ? clear_bhb_loop+0x30/0x80 [ 100.730009][ T4841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.735929][ T4841] RIP: 0033:0x7f5a424a4159 [ 100.740368][ T4841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.759996][ T4841] RSP: 002b:00007f5a406fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.768433][ T4841] RAX: ffffffffffffffda RBX: 00007f5a4272bfa0 RCX: 00007f5a424a4159 [ 100.776439][ T4841] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 100.784431][ T4841] RBP: 00007f5a4253b06b R08: 0000200000002140 R09: 0000000000000000 [ 100.792429][ T4841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.800420][ T4841] R13: 00007f5a4272c038 R14: 00007f5a4272bfa0 R15: 00007ffe07a9d028 [ 100.808445][ T4841] [ 100.951403][ T4189] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 101.049743][ T4848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.183'. [ 103.104572][ T4189] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.123872][ T4189] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.143909][ T4189] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.152992][ T4189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.202611][ T4839] loop2: detected capacity change from 0 to 32768 [ 103.210146][ T4838] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.638170][ T4189] usb 2-1: USB disconnect, device number 9 [ 106.277644][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 107.047387][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.333941][ T4898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.191'. [ 108.850349][ T4903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'. [ 108.959036][ T4905] FAULT_INJECTION: forcing a failure. [ 108.959036][ T4905] name failslab, interval 1, probability 0, space 0, times 0 [ 109.004074][ T4909] loop2: detected capacity change from 0 to 256 [ 109.014076][ T4905] CPU: 1 PID: 4905 Comm: syz.3.197 Not tainted syzkaller #0 [ 109.021400][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.031478][ T4905] Call Trace: [ 109.034777][ T4905] [ 109.037722][ T4905] dump_stack_lvl+0x188/0x250 [ 109.042420][ T4905] ? show_regs_print_info+0x20/0x20 [ 109.047638][ T4905] ? load_image+0x410/0x410 [ 109.052174][ T4905] ? __might_sleep+0xf0/0xf0 [ 109.056787][ T4905] ? __lock_acquire+0x7b50/0x7b50 [ 109.061841][ T4905] should_fail+0x383/0x4b0 [ 109.066280][ T4905] should_failslab+0x5/0x20 [ 109.070805][ T4905] slab_pre_alloc_hook+0x51/0xc0 [ 109.075761][ T4905] __kmalloc+0x6b/0x340 [ 109.079935][ T4905] ? tomoyo_encode+0x28a/0x550 [ 109.084736][ T4905] tomoyo_encode+0x28a/0x550 [ 109.089359][ T4905] tomoyo_mount_permission+0x4f8/0x9b0 [ 109.094835][ T4905] ? ____kasan_slab_free+0xd5/0x110 [ 109.100054][ T4905] ? slab_free_freelist_hook+0xec/0x170 [ 109.105634][ T4905] ? tomoyo_get_name+0x520/0x520 [ 109.110656][ T4905] security_sb_mount+0x83/0xb0 [ 109.115455][ T4905] path_mount+0xb8/0xfe0 [ 109.119732][ T4905] ? user_path_at_empty+0x13e/0x190 [ 109.124963][ T4905] __se_sys_mount+0x2e3/0x3d0 [ 109.129658][ T4905] ? __x64_sys_mount+0xc0/0xc0 [ 109.134428][ T4905] ? lockdep_hardirqs_on+0x94/0x140 [ 109.139635][ T4905] ? __x64_sys_mount+0x1c/0xc0 [ 109.144406][ T4905] do_syscall_64+0x4c/0xa0 [ 109.148823][ T4905] ? clear_bhb_loop+0x30/0x80 [ 109.153504][ T4905] ? clear_bhb_loop+0x30/0x80 [ 109.158188][ T4905] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.164082][ T4905] RIP: 0033:0x7f46ef509159 [ 109.168500][ T4905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.188104][ T4905] RSP: 002b:00007f46ed761028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.196521][ T4905] RAX: ffffffffffffffda RBX: 00007f46ef790fa0 RCX: 00007f46ef509159 [ 109.204492][ T4905] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 109.212462][ T4905] RBP: 00007f46ef5a006b R08: 0000200000002140 R09: 0000000000000000 [ 109.220433][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.228399][ T4905] R13: 00007f46ef791038 R14: 00007f46ef790fa0 R15: 00007ffc691022b8 [ 109.236380][ T4905] [ 109.402987][ T4914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.214'. [ 111.126879][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.169098][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.177124][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.202239][ T4926] device bridge_slave_0 left promiscuous mode [ 111.575376][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.686829][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 112.542098][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.778404][ T4926] device bridge_slave_1 left promiscuous mode [ 112.842199][ T4926] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.857489][ T4926] bond0: (slave bond_slave_0): Releasing backup interface [ 112.878958][ T4926] bond0: (slave bond_slave_1): Releasing backup interface [ 113.034131][ T21] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.046180][ T4926] team0: Port device team_slave_0 removed [ 113.055534][ T21] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.066994][ T21] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.079760][ T4926] team0: Port device team_slave_1 removed [ 113.082300][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.225716][ T4922] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.269038][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.396781][ T4926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.052415][ T21] usb 3-1: USB disconnect, device number 6 [ 114.086844][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.110810][ T4926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.127849][ T4962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.218'. [ 114.233364][ T4967] loop0: detected capacity change from 0 to 256 [ 114.264518][ T4937] team0: Mode changed to "loadbalance" [ 114.375458][ T4477] udevd[4477]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.607545][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 118.667252][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.714960][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.723698][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.734692][ T5001] device bridge_slave_0 left promiscuous mode [ 118.740971][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.750925][ T5001] device bridge_slave_1 left promiscuous mode [ 118.757785][ T5001] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.770395][ T5001] bond0: (slave bond_slave_0): Releasing backup interface [ 118.783577][ T5001] bond0: (slave bond_slave_1): Releasing backup interface [ 118.820648][ T4991] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 118.827978][ T5001] team0: Port device team_slave_0 removed [ 118.837169][ T4991] FAULT_INJECTION: forcing a failure. [ 118.837169][ T4991] name failslab, interval 1, probability 0, space 0, times 0 [ 118.843926][ T4226] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.857523][ T4991] CPU: 1 PID: 4991 Comm: syz.4.226 Not tainted syzkaller #0 [ 118.865011][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.875071][ T4991] Call Trace: [ 118.878373][ T4991] [ 118.881314][ T4991] dump_stack_lvl+0x188/0x250 [ 118.886006][ T4991] ? show_regs_print_info+0x20/0x20 [ 118.891198][ T4991] ? load_image+0x410/0x410 [ 118.895703][ T4991] ? __lock_acquire+0x7b50/0x7b50 [ 118.900749][ T4991] should_fail+0x383/0x4b0 [ 118.905165][ T4991] should_failslab+0x5/0x20 [ 118.909661][ T4991] slab_pre_alloc_hook+0x51/0xc0 [ 118.914600][ T4991] __kmalloc+0x6b/0x340 [ 118.918779][ T4991] ? kobject_get_path+0xae/0x210 [ 118.923741][ T4991] kobject_get_path+0xae/0x210 [ 118.928523][ T4991] kobject_uevent_env+0x28b/0x890 [ 118.933545][ T4991] led_trigger_set+0x6df/0x8f0 [ 118.938321][ T4991] ? led_trigger_remove+0x30/0x30 [ 118.943377][ T4991] led_trigger_set_default+0x1a3/0x1e0 [ 118.948836][ T4991] led_classdev_register_ext+0x6c4/0x8b0 [ 118.954489][ T4991] ? devm_led_release+0xd0/0xd0 [ 118.959368][ T4991] ? input_open_device+0x215/0x2e0 [ 118.964485][ T4991] input_leds_connect+0x503/0x740 [ 118.969523][ T4991] input_register_device+0xd26/0x10c0 [ 118.974905][ T4991] ? ps2_command+0xbc/0xd0 [ 118.979330][ T4991] atkbd_connect+0x766/0x9f0 [ 118.983935][ T4991] ? atkbd_interrupt+0x1440/0x1440 [ 118.989137][ T4991] ? device_release_driver_internal+0x6ab/0x710 [ 118.995390][ T4991] drvctl_store+0x9bb/0xae0 [ 118.999907][ T4991] ? sysfs_kf_read+0x350/0x350 [ 119.004668][ T4991] kernfs_fop_write_iter+0x3a8/0x500 [ 119.009960][ T4991] vfs_write+0x748/0xd70 [ 119.014212][ T4991] ? file_end_write+0x250/0x250 [ 119.019080][ T4991] ? mutex_lock_nested+0x17/0x20 [ 119.024018][ T4991] ? __fdget_pos+0x2bf/0x370 [ 119.028609][ T4991] ? ksys_write+0x70/0x260 [ 119.033030][ T4991] ksys_write+0x153/0x260 [ 119.037361][ T4991] ? __ia32_sys_read+0x80/0x80 [ 119.042135][ T4991] ? lockdep_hardirqs_on+0x94/0x140 [ 119.047338][ T4991] do_syscall_64+0x4c/0xa0 [ 119.051758][ T4991] ? clear_bhb_loop+0x30/0x80 [ 119.056435][ T4991] ? clear_bhb_loop+0x30/0x80 [ 119.061113][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.067009][ T4991] RIP: 0033:0x7f1a03718159 [ 119.071431][ T4991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.091035][ T4991] RSP: 002b:00007f1a01970028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.099453][ T4991] RAX: ffffffffffffffda RBX: 00007f1a0399ffa0 RCX: 00007f1a03718159 [ 119.107423][ T4991] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000005 [ 119.115397][ T4991] RBP: 00007f1a037af06b R08: 0000000000000000 R09: 0000000000000000 [ 119.123370][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.131338][ T4991] R13: 00007f1a039a0038 R14: 00007f1a0399ffa0 R15: 00007ffdc7ce4688 [ 119.139328][ T4991] [ 119.159796][ T4991] leds input7::numlock: led_trigger_set: Error sending uevent [ 119.176243][ T5001] team0: Port device team_slave_1 removed [ 119.185492][ T5001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.193003][ T5001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.203317][ T5001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.211620][ T5001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.271832][ T5002] team0: Mode changed to "loadbalance" [ 119.384148][ T4226] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.402415][ T4226] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.416495][ T4226] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.442532][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.485013][ T4995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.668723][ T5015] loop4: detected capacity change from 0 to 256 [ 120.192826][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 121.274738][ T21] usb 4-1: USB disconnect, device number 5 [ 121.596689][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.635921][ T5037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 121.723134][ T5037] FAULT_INJECTION: forcing a failure. [ 121.723134][ T5037] name failslab, interval 1, probability 0, space 0, times 0 [ 121.816719][ T5037] CPU: 1 PID: 5037 Comm: syz.0.246 Not tainted syzkaller #0 [ 121.824063][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.834132][ T5037] Call Trace: [ 121.837423][ T5037] [ 121.840366][ T5037] dump_stack_lvl+0x188/0x250 [ 121.845069][ T5037] ? show_regs_print_info+0x20/0x20 [ 121.850289][ T5037] ? load_image+0x410/0x410 [ 121.854809][ T5037] ? __might_sleep+0xf0/0xf0 [ 121.859419][ T5037] ? __lock_acquire+0x7b50/0x7b50 [ 121.864469][ T5037] should_fail+0x383/0x4b0 [ 121.868920][ T5037] should_failslab+0x5/0x20 [ 121.873436][ T5037] slab_pre_alloc_hook+0x51/0xc0 [ 121.878391][ T5037] kmem_cache_alloc_trace+0x47/0x290 [ 121.883687][ T5037] ? kobject_uevent_env+0x275/0x890 [ 121.888916][ T5037] kobject_uevent_env+0x275/0x890 [ 121.893973][ T5037] led_trigger_set+0x6df/0x8f0 [ 121.898766][ T5037] ? led_trigger_remove+0x30/0x30 [ 121.903819][ T5037] led_trigger_set_default+0x1a3/0x1e0 [ 121.909305][ T5037] led_classdev_register_ext+0x6c4/0x8b0 [ 121.914965][ T5037] ? devm_led_release+0xd0/0xd0 [ 121.919866][ T5037] ? input_open_device+0x215/0x2e0 [ 121.925002][ T5037] input_leds_connect+0x503/0x740 [ 121.930057][ T5037] input_register_device+0xd26/0x10c0 [ 121.935449][ T5037] ? ps2_command+0xbc/0xd0 [ 121.939883][ T5037] atkbd_connect+0x766/0x9f0 [ 121.944509][ T5037] ? atkbd_interrupt+0x1440/0x1440 [ 121.949641][ T5037] ? device_release_driver_internal+0x6ab/0x710 [ 121.955919][ T5037] drvctl_store+0x9bb/0xae0 [ 121.960455][ T5037] ? sysfs_kf_read+0x350/0x350 [ 121.965230][ T5037] kernfs_fop_write_iter+0x3a8/0x500 [ 121.970541][ T5037] vfs_write+0x748/0xd70 [ 121.974812][ T5037] ? file_end_write+0x250/0x250 [ 121.979703][ T5037] ? mutex_lock_nested+0x17/0x20 [ 121.984658][ T5037] ? __fdget_pos+0x2bf/0x370 [ 121.989265][ T5037] ? ksys_write+0x70/0x260 [ 121.993701][ T5037] ksys_write+0x153/0x260 [ 121.998057][ T5037] ? __ia32_sys_read+0x80/0x80 [ 122.002843][ T5037] ? lockdep_hardirqs_on+0x94/0x140 [ 122.008068][ T5037] do_syscall_64+0x4c/0xa0 [ 122.012504][ T5037] ? clear_bhb_loop+0x30/0x80 [ 122.017199][ T5037] ? clear_bhb_loop+0x30/0x80 [ 122.021896][ T5037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.027811][ T5037] RIP: 0033:0x7f5a424a4159 [ 122.032240][ T5037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.051863][ T5037] RSP: 002b:00007f5a406fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.060324][ T5037] RAX: ffffffffffffffda RBX: 00007f5a4272bfa0 RCX: 00007f5a424a4159 [ 122.068318][ T5037] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000005 [ 122.076303][ T5037] RBP: 00007f5a4253b06b R08: 0000000000000000 R09: 0000000000000000 [ 122.084295][ T5037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.092291][ T5037] R13: 00007f5a4272c038 R14: 00007f5a4272bfa0 R15: 00007ffe07a9d028 [ 122.100308][ T5037] [ 122.171491][ T5037] leds input8::numlock: led_trigger_set: Error sending uevent [ 122.295511][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.297306][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.297437][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.299046][ T5045] device bridge_slave_0 left promiscuous mode [ 122.299685][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.401344][ T5045] device bridge_slave_1 left promiscuous mode [ 122.401497][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.432836][ C0] hrtimer: interrupt took 95586 ns [ 122.436707][ T5045] bond0: (slave bond_slave_0): Releasing backup interface [ 122.484233][ T5045] bond0: (slave bond_slave_1): Releasing backup interface [ 122.575754][ T5045] team0: Port device team_slave_0 removed [ 122.610376][ T5045] team0: Port device team_slave_1 removed [ 122.611112][ T5045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.611147][ T5045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.621152][ T5045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.621186][ T5045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.746942][ T5049] team0: Mode changed to "loadbalance" [ 122.891710][ T5053] tipc: Started in network mode [ 122.891743][ T5053] tipc: Node identity ac1414aa, cluster identity 4711 [ 122.894436][ T5053] tipc: Enabling of bearer rejected, failed to enable media [ 123.163769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #06!!! [ 124.523787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 124.543770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1a!!! [ 124.553767][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1a!!! [ 124.563767][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 124.573767][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 124.583767][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 124.593770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 124.623772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 124.633769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 126.536578][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 128.074164][ T4226] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.434123][ T4226] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.447245][ T4226] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.459285][ T4226] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.470041][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.506651][ T5097] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.928815][ T5105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.182512][ T5110] loop3: detected capacity change from 0 to 256 [ 130.196938][ T4226] usb 5-1: USB disconnect, device number 6 [ 130.811221][ T5116] loop0: detected capacity change from 0 to 128 [ 133.105541][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112980][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.179183][ T5116] ufs: You didn't specify the type of your ufs filesystem [ 133.179183][ T5116] [ 133.179183][ T5116] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 133.179183][ T5116] [ 133.179183][ T5116] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 133.349143][ T5116] ufs: ufstype=old is supported read-only [ 133.527845][ T5116] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 134.256853][ T5134] tipc: Started in network mode [ 134.300533][ T5134] tipc: Node identity ac1414aa, cluster identity 4711 [ 134.422563][ T5134] tipc: Enabling of bearer rejected, failed to enable media [ 143.698255][ T5130] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 143.827491][ T5130] FAULT_INJECTION: forcing a failure. [ 143.827491][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 143.872228][ T5130] CPU: 0 PID: 5130 Comm: syz.1.269 Not tainted syzkaller #0 [ 143.879573][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.889657][ T5130] Call Trace: [ 143.892949][ T5130] [ 143.895896][ T5130] dump_stack_lvl+0x188/0x250 [ 143.900599][ T5130] ? show_regs_print_info+0x20/0x20 [ 143.905822][ T5130] ? load_image+0x410/0x410 [ 143.910351][ T5130] ? __lock_acquire+0x7b50/0x7b50 [ 143.915416][ T5130] should_fail+0x383/0x4b0 [ 143.919868][ T5130] should_failslab+0x5/0x20 [ 143.924429][ T5130] slab_pre_alloc_hook+0x51/0xc0 [ 143.929385][ T5130] ? kasprintf+0xdf/0x130 [ 143.933736][ T5130] __kmalloc_track_caller+0x69/0x330 [ 143.939043][ T5130] ? kasprintf+0xdf/0x130 [ 143.943397][ T5130] kvasprintf+0xe3/0x1a0 [ 143.947661][ T5130] ? verify_lock_unused+0x140/0x140 [ 143.952877][ T5130] ? bust_spinlocks+0xd0/0xd0 [ 143.957587][ T5130] kasprintf+0xdf/0x130 [ 143.961771][ T5130] ? kvasprintf_const+0x240/0x240 [ 143.966818][ T5130] ? lock_acquire+0x208/0x400 [ 143.971530][ T5130] led_trigger_set+0xf7/0x8f0 [ 143.976234][ T5130] ? led_trigger_remove+0x30/0x30 [ 143.981288][ T5130] led_trigger_set_default+0x1a3/0x1e0 [ 143.986775][ T5130] led_classdev_register_ext+0x6c4/0x8b0 [ 143.992435][ T5130] ? devm_led_release+0xd0/0xd0 [ 143.997326][ T5130] ? input_open_device+0x215/0x2e0 [ 144.002460][ T5130] input_leds_connect+0x503/0x740 [ 144.007514][ T5130] input_register_device+0xd26/0x10c0 [ 144.012913][ T5130] ? ps2_command+0xbc/0xd0 [ 144.017351][ T5130] atkbd_connect+0x766/0x9f0 [ 144.021973][ T5130] ? atkbd_interrupt+0x1440/0x1440 [ 144.027108][ T5130] ? device_release_driver_internal+0x6ab/0x710 [ 144.033375][ T5130] drvctl_store+0x9bb/0xae0 [ 144.037905][ T5130] ? sysfs_kf_read+0x350/0x350 [ 144.042680][ T5130] kernfs_fop_write_iter+0x3a8/0x500 [ 144.047986][ T5130] vfs_write+0x748/0xd70 [ 144.052254][ T5130] ? file_end_write+0x250/0x250 [ 144.057145][ T5130] ? mutex_lock_nested+0x17/0x20 [ 144.062094][ T5130] ? __fdget_pos+0x2bf/0x370 [ 144.066717][ T5130] ? ksys_write+0x70/0x260 [ 144.071151][ T5130] ksys_write+0x153/0x260 [ 144.075502][ T5130] ? __ia32_sys_read+0x80/0x80 [ 144.080294][ T5130] do_syscall_64+0x4c/0xa0 [ 144.084725][ T5130] ? clear_bhb_loop+0x30/0x80 [ 144.089415][ T5130] ? clear_bhb_loop+0x30/0x80 [ 144.094151][ T5130] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.100062][ T5130] RIP: 0033:0x7f25a56df159 [ 144.104497][ T5130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.124549][ T5130] RSP: 002b:00007f25a3937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.132980][ T5130] RAX: ffffffffffffffda RBX: 00007f25a5966fa0 RCX: 00007f25a56df159 [ 144.140969][ T5130] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000005 [ 144.148951][ T5130] RBP: 00007f25a577606b R08: 0000000000000000 R09: 0000000000000000 [ 144.156931][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.164916][ T5130] R13: 00007f25a5967038 R14: 00007f25a5966fa0 R15: 00007ffe9bd041a8 [ 144.172959][ T5130] [ 150.219080][ T5168] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.322853][ T5211] loop4: detected capacity change from 0 to 512 [ 167.426115][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'. [ 168.895146][ T5211] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 168.934667][ T5211] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.954783][ T5194] tipc: Started in network mode [ 168.960572][ T5194] tipc: Node identity ac1414aa, cluster identity 4711 [ 168.984870][ T5194] tipc: Enabling of bearer rejected, failed to enable media [ 170.193320][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 170.492469][ T5227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.306'. [ 173.976276][ T5232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.308'. [ 174.633947][ T5242] hub 8-0:1.0: USB hub found [ 174.643423][ T5242] hub 8-0:1.0: 1 port detected [ 174.714455][ T4189] Bluetooth: hci4: command 0x041b tx timeout [ 175.820413][ T5246] loop2: detected capacity change from 0 to 1024 [ 176.564497][ T5204] chnl_net:caif_netlink_parms(): no params data found [ 176.835304][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 184.603453][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 186.472233][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.480680][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.492912][ T5204] device bridge_slave_0 entered promiscuous mode [ 186.505694][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.514076][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.526690][ T5204] device bridge_slave_1 entered promiscuous mode [ 186.579851][ T4189] Bluetooth: hci1: command 0x0406 tx timeout [ 186.609670][ T5204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.627364][ T4189] Bluetooth: hci2: command 0x0406 tx timeout [ 186.635688][ T5204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.884176][ T4189] Bluetooth: hci3: command 0x0406 tx timeout [ 186.927390][ T5204] team0: Port device team_slave_0 added [ 187.022887][ T4238] Bluetooth: hci0: command 0x0406 tx timeout [ 187.086978][ T5204] team0: Port device team_slave_1 added [ 187.661914][ T5204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.724135][ T5204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.113962][ T5204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.307725][ T5204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.374116][ T5204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.634041][ T5204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.563465][ T5204] device hsr_slave_0 entered promiscuous mode [ 189.630380][ T5204] device hsr_slave_1 entered promiscuous mode [ 189.690052][ T5204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.724394][ T5204] Cannot create hsr debugfs directory [ 191.994463][ T4228] Bluetooth: hci5: command 0x0409 tx timeout [ 192.058988][ T5204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.222832][ T5204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.326539][ T5259] chnl_net:caif_netlink_parms(): no params data found [ 192.405256][ T5204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.500313][ T5204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.385083][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.416703][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.476734][ T5259] device bridge_slave_0 entered promiscuous mode [ 193.599027][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.654770][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.744130][ T5259] device bridge_slave_1 entered promiscuous mode [ 194.074178][ T4227] Bluetooth: hci5: command 0x041b tx timeout [ 194.141948][ T5204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.203684][ T5259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.307851][ T5259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.327316][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336179][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.617690][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.636826][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.726085][ T5204] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.836318][ T5259] team0: Port device team_slave_0 added [ 194.931584][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.998358][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.236192][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.246161][ T4645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.379894][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.402827][ T5259] team0: Port device team_slave_1 added [ 195.658498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.714040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.845541][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.855615][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.890397][ T5259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.923855][ T5259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.134232][ T5259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.146766][ T4226] Bluetooth: hci5: command 0x040f tx timeout [ 196.203412][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.295618][ T5259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.324062][ T5259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.401993][ T5259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.429748][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.443453][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.458545][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.640222][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.652505][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.702255][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.818323][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.857347][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.022999][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.046653][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.168950][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.256702][ T5259] device hsr_slave_0 entered promiscuous mode [ 197.335382][ T5259] device hsr_slave_1 entered promiscuous mode [ 197.423464][ T5259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.454199][ T5259] Cannot create hsr debugfs directory [ 198.224041][ T4228] Bluetooth: hci5: command 0x0419 tx timeout [ 199.288481][ T5259] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.408738][ T5259] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.495508][ T5259] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.569637][ T5259] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.720025][ T5259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.823478][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.887576][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.967893][ T5259] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.072129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.142581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.152666][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.161056][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.177940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.187675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.254489][ T5204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.263659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.273470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.300760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.317725][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.326154][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.379142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.402080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.558843][ T4235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.659280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.676195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.688250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.700014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.790852][ T4235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.898463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.949153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.966980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.019018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.059098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.099567][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.220452][ T4235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.465724][ T4235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.996610][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.031801][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.260332][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.271668][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.528517][ T5259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.775196][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.823303][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.348552][ T5204] device veth0_vlan entered promiscuous mode [ 206.376382][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.402490][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.556116][ T5204] device veth1_vlan entered promiscuous mode [ 207.411974][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.429460][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.530994][ T5204] device veth0_macvtap entered promiscuous mode [ 207.742316][ T5204] device veth1_macvtap entered promiscuous mode [ 208.522255][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.574946][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.636123][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.681122][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.768218][ T5204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.818058][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.847719][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.916659][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.042396][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.109374][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.152268][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.183792][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.238715][ T5204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.394170][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.463213][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.569388][ T5204] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.669822][ T5204] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.724156][ T5204] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.754333][ T5204] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.846223][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.887445][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.627695][ T4235] device hsr_slave_0 left promiscuous mode [ 210.916814][ T4235] device hsr_slave_1 left promiscuous mode [ 210.950043][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.044254][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.166943][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.194962][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.397568][ T4235] device bridge_slave_1 left promiscuous mode [ 211.436398][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.618141][ T4235] device bridge_slave_0 left promiscuous mode [ 211.730080][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.028632][ T4235] device veth1_macvtap left promiscuous mode [ 212.105515][ T4235] device veth0_macvtap left promiscuous mode [ 212.112950][ T4235] device veth1_vlan left promiscuous mode [ 212.241569][ T4235] device veth0_vlan left promiscuous mode [ 214.270136][ T4235] team0 (unregistering): Port device team_slave_1 removed [ 214.301395][ T4235] team0 (unregistering): Port device team_slave_0 removed [ 214.332998][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.384227][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.543867][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 214.680965][ T4235] bond0 (unregistering): Released all slaves [ 214.779507][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.789918][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.802511][ T5259] device veth0_vlan entered promiscuous mode [ 214.863800][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.894344][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.908514][ T5259] device veth1_vlan entered promiscuous mode [ 215.005279][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.037205][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.085739][ T5259] device veth0_macvtap entered promiscuous mode [ 215.124815][ T5259] device veth1_macvtap entered promiscuous mode [ 215.240018][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.262019][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.277306][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.292866][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.308589][ T5259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.323308][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.344074][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.352220][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.372541][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.422139][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.466053][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.498614][ T5259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.517664][ T5259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.552289][ T5259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.564114][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.572824][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.617104][ T5259] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.643849][ T5259] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.652595][ T5259] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.699797][ T5259] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.726414][ T5316] chnl_net:caif_netlink_parms(): no params data found [ 215.993549][ T4951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.011967][ T4951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.032969][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.091242][ T4779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.118132][ T4779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.140998][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.168776][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.201059][ T5316] device bridge_slave_0 entered promiscuous mode [ 216.228449][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.249388][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.288653][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.324430][ T5316] device bridge_slave_1 entered promiscuous mode [ 216.661947][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 216.687070][ T5316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.219486][ T5354] netlink: 36 bytes leftover after parsing attributes in process `syz.0.314'. [ 219.287497][ T4174] Bluetooth: hci1: command 0x040f tx timeout [ 219.296358][ T5316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.454340][ T5316] team0: Port device team_slave_0 added [ 219.516621][ T5316] team0: Port device team_slave_1 added [ 219.763674][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.770696][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.817204][ T26] audit: type=1800 audit(1790349652.246:2): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.317" name="attr_allow_any_host" dev="configfs" ino=38487 res=0 errno=0 [ 220.174778][ T5316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.357332][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.373874][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.404583][ T5370] loop6: detected capacity change from 0 to 128 [ 220.421212][ T26] audit: type=1800 audit(1790349652.846:3): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.317" name="addr_trtype" dev="configfs" ino=36540 res=0 errno=0 [ 220.449712][ T5361] nvmet_tcp: enabling port 1 (127.0.0.1:442) [ 220.527175][ T26] audit: type=1800 audit(1790349652.876:4): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.317" name="addr_traddr" dev="configfs" ino=38499 res=0 errno=0 [ 220.575879][ T5370] ufs: You didn't specify the type of your ufs filesystem [ 220.575879][ T5370] [ 220.575879][ T5370] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 220.575879][ T5370] [ 220.575879][ T5370] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 220.672830][ T5316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.717139][ T26] audit: type=1800 audit(1790349652.876:5): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.317" name="addr_trsvcid" dev="configfs" ino=38500 res=0 errno=0 [ 220.916938][ T26] audit: type=1800 audit(1790349652.876:6): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.317" name="addr_adrfam" dev="configfs" ino=38501 res=0 errno=0 [ 220.945119][ T5316] device hsr_slave_0 entered promiscuous mode [ 220.953955][ T5370] ufs: ufstype=old is supported read-only [ 220.964383][ T5370] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 220.984396][ T5316] device hsr_slave_1 entered promiscuous mode [ 220.996802][ T5316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.010808][ T5316] Cannot create hsr debugfs directory [ 221.355788][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 221.835036][ T5391] loop2: detected capacity change from 0 to 4096 [ 221.863537][ T5316] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.915433][ T5397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.321'. [ 222.012564][ T5391] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 222.511775][ T5389] tipc: Started in network mode [ 222.556960][ T5389] tipc: Node identity ac1414aa, cluster identity 4711 [ 222.575919][ T5389] tipc: Enabling of bearer rejected, failed to enable media [ 222.826564][ T5316] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.964977][ T5316] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.302575][ T5421] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 224.432640][ T5421] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 225.753797][ T4227] Bluetooth: hci0: command 0x0c13 tx timeout [ 226.365227][ T5316] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.849613][ T5316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.909222][ T5316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.945921][ T5316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.991908][ T5316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.260484][ T5316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.325312][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.351624][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.389353][ T5316] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.447422][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.474726][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.515076][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.522187][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.566172][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.643304][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.693373][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.700515][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.774997][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.793349][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.823346][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.853564][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.892236][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.943947][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.013466][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.034913][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.064239][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.093458][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.128615][ T5316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.156995][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.227500][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.242146][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.817910][ T4235] device hsr_slave_0 left promiscuous mode [ 229.853155][ T4235] device hsr_slave_1 left promiscuous mode [ 229.872377][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.904502][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.934745][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.942205][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.979968][ T4235] device bridge_slave_1 left promiscuous mode [ 229.997426][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.044464][ T4235] device bridge_slave_0 left promiscuous mode [ 230.050707][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.119163][ T4235] device veth1_macvtap left promiscuous mode [ 230.133079][ T4235] device veth0_macvtap left promiscuous mode [ 230.139841][ T4235] device veth1_vlan left promiscuous mode [ 230.155753][ T4235] device veth0_vlan left promiscuous mode [ 230.835344][ T4235] team0 (unregistering): Port device team_slave_1 removed [ 230.853493][ T4235] team0 (unregistering): Port device team_slave_0 removed [ 230.870367][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.887883][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.977527][ T4235] bond0 (unregistering): Released all slaves [ 231.766307][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.784657][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.814562][ T5316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.520827][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.534589][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.592232][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.618243][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.647838][ T5316] device veth0_vlan entered promiscuous mode [ 232.665490][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.691539][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.736443][ T5316] device veth1_vlan entered promiscuous mode [ 232.797377][ T5316] device veth0_macvtap entered promiscuous mode [ 232.832019][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.854668][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.885020][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.904414][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.936870][ T5316] device veth1_macvtap entered promiscuous mode [ 232.960435][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.984850][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.021586][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.054938][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.090050][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.150715][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.185208][ T5316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.195423][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.232173][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.341161][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.360619][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.377116][ T5316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.392523][ T5316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.408277][ T5316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.422005][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.437023][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.454932][ T5316] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.469242][ T5316] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.483012][ T5316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.496153][ T5316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.083198][ T4952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.119000][ T4952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.184373][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.204430][ T4779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.230636][ T4779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.260966][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.397680][ T5512] loop3: detected capacity change from 0 to 256 [ 236.946639][ T5535] loop5: detected capacity change from 0 to 128 [ 237.242035][ T5535] ufs: You didn't specify the type of your ufs filesystem [ 237.242035][ T5535] [ 237.242035][ T5535] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 237.242035][ T5535] [ 237.242035][ T5535] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 237.533902][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 237.895876][ T5535] ufs: ufstype=old is supported read-only [ 239.790746][ T5535] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 239.971599][ T5564] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 242.207572][ T5588] loop5: detected capacity change from 0 to 4096 [ 242.371845][ T5588] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 246.013033][ T5638] loop2: detected capacity change from 0 to 512 [ 246.024860][ T5643] loop0: detected capacity change from 0 to 164 [ 246.030230][ T5645] loop3: detected capacity change from 0 to 1024 [ 247.073167][ T5638] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 247.106161][ T5638] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.096890][ T5643] TC_ACT_REPEAT abuse ? [ 252.099222][ T5707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.377'. [ 253.002825][ T5716] loop6: detected capacity change from 0 to 4096 [ 254.131066][ T5716] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 255.753640][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.763066][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.222511][ T5747] loop0: detected capacity change from 0 to 1024 [ 258.695315][ T5760] jffs2: notice: (5760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.769065][ T26] audit: type=1800 audit(1790349691.196:7): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.382" name="attr_allow_any_host" dev="configfs" ino=39760 res=0 errno=0 [ 258.814021][ T5761] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 258.814193][ T26] audit: type=1800 audit(1790349691.226:8): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.382" name="addr_trtype" dev="configfs" ino=39761 res=0 errno=0 [ 258.858198][ T5761] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 258.874315][ T5761] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 258.888133][ T26] audit: type=1800 audit(1790349691.286:9): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.382" name="addr_traddr" dev="configfs" ino=36715 res=0 errno=0 [ 258.921424][ T26] audit: type=1800 audit(1790349691.296:10): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.382" name="addr_trsvcid" dev="configfs" ino=36716 res=0 errno=0 [ 258.952486][ T5761] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 259.101192][ T26] audit: type=1800 audit(1790349691.346:11): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.382" name="addr_adrfam" dev="configfs" ino=39763 res=0 errno=0 [ 260.175706][ T5774] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 260.195310][ T5776] hub 8-0:1.0: USB hub found [ 260.203695][ T5776] hub 8-0:1.0: 1 port detected [ 260.205634][ T5774] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 260.462933][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 260.785439][ T5789] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 267.085728][ T5875] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 267.188507][ T26] audit: type=1800 audit(1790349699.616:12): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.401" name="attr_allow_any_host" dev="configfs" ino=39988 res=0 errno=0 [ 267.230917][ T5875] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 267.240196][ T5877] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 267.314110][ T5880] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 267.325227][ T26] audit: type=1800 audit(1790349699.636:13): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.401" name="addr_trtype" dev="configfs" ino=39989 res=0 errno=0 [ 267.958150][ T5877] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 267.996525][ T5885] hub 8-0:1.0: USB hub found [ 268.003738][ T5885] hub 8-0:1.0: 1 port detected [ 268.058467][ T5877] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 268.075219][ T26] audit: type=1800 audit(1790349699.706:14): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.401" name="addr_traddr" dev="configfs" ino=39992 res=0 errno=0 [ 268.221389][ T26] audit: type=1800 audit(1790349700.386:15): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.401" name="addr_trsvcid" dev="configfs" ino=36738 res=0 errno=0 [ 268.310565][ T26] audit: type=1800 audit(1790349700.486:16): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.401" name="addr_adrfam" dev="configfs" ino=39999 res=0 errno=0 [ 268.754642][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.405'. [ 269.444713][ T5906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.408'. [ 269.734186][ T5908] loop5: detected capacity change from 0 to 256 [ 272.440753][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.3.422'. [ 276.390038][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 276.808570][ T5976] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 276.871955][ T5976] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 277.550942][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.567441][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.580253][ T5960] device bridge_slave_0 entered promiscuous mode [ 277.602547][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.619804][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.630841][ T5960] device bridge_slave_1 entered promiscuous mode [ 277.707983][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.738744][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.748401][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 277.851345][ T5960] team0: Port device team_slave_0 added [ 277.922556][ T5960] team0: Port device team_slave_1 added [ 278.055686][ T5988] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 278.705661][ T5989] hub 8-0:1.0: USB hub found [ 278.706707][ T5982] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 278.712768][ T5989] hub 8-0:1.0: 1 port detected [ 278.945197][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.003041][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.091316][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.137065][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.161958][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.292279][ T5995] loop6: detected capacity change from 0 to 256 [ 279.308421][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.527551][ T5960] device hsr_slave_0 entered promiscuous mode [ 279.544579][ T5960] device hsr_slave_1 entered promiscuous mode [ 279.551478][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.581553][ T5960] Cannot create hsr debugfs directory [ 279.837876][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 281.281724][ T6005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.426'. [ 282.008667][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 282.995653][ T5960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 283.054973][ T5960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 283.084550][ T5960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 283.175676][ T5960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 283.394983][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.425270][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.444628][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.456334][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.477523][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.500568][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.518307][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.525483][ T5684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.559648][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.573325][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.592934][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.603827][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.610912][ T5684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.635828][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.669046][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.684984][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.707563][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.724878][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.736647][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.769607][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.787677][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.803091][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.820342][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.834948][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.857847][ T5960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.071897][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 284.135760][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.239716][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.711200][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.414336][ T6029] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 290.644901][ T5960] device veth0_vlan entered promiscuous mode [ 290.678453][ T6071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.441'. [ 290.699737][ T5960] device veth1_vlan entered promiscuous mode [ 290.827067][ T5960] device veth0_macvtap entered promiscuous mode [ 290.852906][ T6074] loop6: detected capacity change from 0 to 164 [ 290.867952][ T5960] device veth1_macvtap entered promiscuous mode [ 290.954623][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.980637][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.006336][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.037943][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.081919][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.154602][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.214615][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.390980][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.443034][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.488700][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.523240][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.539754][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.552560][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.613805][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.702295][ T5960] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.803391][ T5960] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.856501][ T6087] input: syz0 as /devices/virtual/input/input10 [ 291.908220][ T5960] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.917278][ T5960] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.942485][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.010309][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.085901][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.106689][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.147102][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.180334][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 292.220873][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.263654][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.283372][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 292.311382][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.333482][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.349734][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.365288][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.413181][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.264338][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.376006][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.182785][ T6121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.455'. [ 298.631104][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.649448][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.726666][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.927326][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.941443][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.979188][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.975868][ T6139] netlink: 36 bytes leftover after parsing attributes in process `syz.5.470'. [ 304.348952][ T6173] loop5: detected capacity change from 0 to 164 [ 306.007851][ T6188] jffs2: notice: (6188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 306.097335][ T6187] netlink: 36 bytes leftover after parsing attributes in process `syz.6.475'. [ 306.226199][ T6173] TC_ACT_REPEAT abuse ? [ 309.943271][ T6214] netlink: 'syz.6.484': attribute type 9 has an invalid length. [ 309.952904][ T6214] netlink: 'syz.6.484': attribute type 7 has an invalid length. [ 309.960791][ T6214] netlink: 'syz.6.484': attribute type 8 has an invalid length. [ 311.088806][ T6229] jffs2: notice: (6229) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 312.603964][ T6252] netlink: 36 bytes leftover after parsing attributes in process `syz.6.494'. [ 313.213288][ T6254] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 313.625004][ T6257] se_dev->se_dev_ptr already set for storage object [ 317.493320][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.502389][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.528613][ T4238] Bluetooth: hci5: command 0x0406 tx timeout [ 320.062864][ T6294] netlink: 36 bytes leftover after parsing attributes in process `syz.6.506'. [ 321.407427][ T6297] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 330.826323][ T6353] se_dev->se_dev_ptr already set for storage object [ 334.646420][ T4174] Bluetooth: hci1: command 0x0406 tx timeout [ 337.712763][ T6401] se_dev->se_dev_ptr already set for storage object [ 338.760560][ T6412] netlink: 'syz.5.541': attribute type 9 has an invalid length. [ 338.768297][ T6412] netlink: 'syz.5.541': attribute type 7 has an invalid length. [ 338.776016][ T6412] netlink: 'syz.5.541': attribute type 8 has an invalid length. [ 340.323385][ T6427] netlink: 36 bytes leftover after parsing attributes in process `syz.7.542'. [ 341.101560][ T6438] input: syz0 as /devices/virtual/input/input12 [ 342.242519][ T6452] se_dev->se_dev_ptr already set for storage object [ 346.342156][ T6472] input: syz0 as /devices/virtual/input/input13 [ 346.980501][ T6482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.574'. [ 348.826131][ T6497] se_dev->se_dev_ptr already set for storage object [ 350.693860][ T6494] netlink: 'syz.7.566': attribute type 9 has an invalid length. [ 350.701572][ T6494] netlink: 'syz.7.566': attribute type 7 has an invalid length. [ 350.768237][ T6494] netlink: 'syz.7.566': attribute type 8 has an invalid length. [ 353.772328][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.579'. [ 354.649648][ T6539] se_dev->se_dev_ptr already set for storage object [ 356.424417][ T6543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'. [ 360.752315][ T6592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.598'. [ 361.770460][ T26] audit: type=1326 audit(1790349794.196:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.3.603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46ef509159 code=0x0 [ 362.005428][ T6609] FAULT_INJECTION: forcing a failure. [ 362.005428][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 362.005543][ T6609] CPU: 0 PID: 6609 Comm: syz.7.605 Not tainted syzkaller #0 [ 362.005565][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 362.005576][ T6609] Call Trace: [ 362.005608][ T6609] [ 362.005665][ T6609] dump_stack_lvl+0x188/0x250 [ 362.005772][ T6609] ? show_regs_print_info+0x20/0x20 [ 362.005795][ T6609] ? load_image+0x410/0x410 [ 362.005821][ T6609] ? __might_sleep+0xf0/0xf0 [ 362.005901][ T6609] ? __lock_acquire+0x7b50/0x7b50 [ 362.005975][ T6609] should_fail+0x383/0x4b0 [ 362.006073][ T6609] should_failslab+0x5/0x20 [ 362.006126][ T6609] slab_pre_alloc_hook+0x51/0xc0 [ 362.006165][ T6609] ? snd_timer_instance_new+0x66/0x210 [ 362.006229][ T6609] __kmalloc_track_caller+0x69/0x330 [ 362.006248][ T6609] ? snd_timer_instance_new+0x66/0x210 [ 362.006277][ T6609] kstrdup+0x32/0x70 [ 362.006306][ T6609] snd_timer_instance_new+0x66/0x210 [ 362.006328][ T6609] snd_seq_timer_open+0x237/0x600 [ 362.006388][ T6609] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 362.006407][ T6609] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 362.006471][ T6609] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 362.006493][ T6609] ? _raw_spin_unlock+0x40/0x40 [ 362.006519][ T6609] ? snd_seq_timer_defaults+0x31/0x530 [ 362.006566][ T6609] snd_seq_queue_alloc+0x3b3/0x740 [ 362.006598][ T6609] snd_seq_ioctl_create_queue+0x7b/0x320 [ 362.006621][ T6609] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 362.006655][ T6609] snd_seq_oss_open+0x622/0xf00 [ 362.006686][ T6609] ? snd_seq_oss_delete_client+0x50/0x50 [ 362.006747][ T6609] ? __mutex_lock_common+0x435/0x2400 [ 362.006786][ T6609] ? mutex_lock_io_nested+0x60/0x60 [ 362.006814][ T6609] ? snd_seq_oss_process_event+0x2910/0x2910 [ 362.006834][ T6609] ? async_call_lookup_ports+0x10/0x10 [ 362.006852][ T6609] ? do_raw_spin_unlock+0x11d/0x230 [ 362.006883][ T6609] odev_open+0x63/0x90 [ 362.006902][ T6609] chrdev_open+0x585/0x5f0 [ 362.006976][ T6609] ? cd_forget+0x160/0x160 [ 362.007002][ T6609] ? fsnotify_perm+0x3a7/0x560 [ 362.007075][ T6609] ? cd_forget+0x160/0x160 [ 362.007097][ T6609] do_dentry_open+0x7f7/0xf90 [ 362.007121][ T6609] ? vfs_open+0x2b/0x80 [ 362.007147][ T6609] path_openat+0x2718/0x2fb0 [ 362.007201][ T6609] ? __kasan_slab_alloc+0xa9/0xc0 [ 362.007251][ T6609] ? do_filp_open+0x400/0x400 [ 362.007292][ T6609] do_filp_open+0x1df/0x400 [ 362.007318][ T6609] ? vfs_tmpfile+0x300/0x300 [ 362.007361][ T6609] ? _raw_spin_unlock+0x24/0x40 [ 362.007379][ T6609] ? alloc_fd+0x59e/0x650 [ 362.007427][ T6609] do_sys_openat2+0x14b/0x500 [ 362.007445][ T6609] ? __lock_acquire+0x7b50/0x7b50 [ 362.007469][ T6609] ? do_sys_open+0xe0/0xe0 [ 362.007488][ T6609] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 362.007514][ T6609] ? lock_chain_count+0x20/0x20 [ 362.007542][ T6609] __x64_sys_openat+0x135/0x160 [ 362.007567][ T6609] do_syscall_64+0x4c/0xa0 [ 362.007596][ T6609] ? clear_bhb_loop+0x30/0x80 [ 362.007633][ T6609] ? clear_bhb_loop+0x30/0x80 [ 362.007663][ T6609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.007685][ T6609] RIP: 0033:0x7f4d320cd159 [ 362.007727][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.007766][ T6609] RSP: 002b:00007f4d30325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.007793][ T6609] RAX: ffffffffffffffda RBX: 00007f4d32354fa0 RCX: 00007f4d320cd159 [ 362.007808][ T6609] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 362.007822][ T6609] RBP: 00007f4d3216406b R08: 0000000000000000 R09: 0000000000000000 [ 362.007835][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.007849][ T6609] R13: 00007f4d32355038 R14: 00007f4d32354fa0 R15: 00007fffd77587d8 [ 362.007881][ T6609] [ 363.639003][ T6626] netlink: 36 bytes leftover after parsing attributes in process `syz.2.610'. [ 364.492928][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.614'. [ 365.338546][ T6644] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.174720][ T6661] netlink: 36 bytes leftover after parsing attributes in process `syz.5.624'. [ 370.287574][ T6683] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 371.457687][ T6699] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 372.872425][ T6711] FAULT_INJECTION: forcing a failure. [ 372.872425][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 373.025579][ T6711] CPU: 0 PID: 6711 Comm: syz.5.640 Not tainted syzkaller #0 [ 373.032930][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 373.043008][ T6711] Call Trace: [ 373.046308][ T6711] [ 373.049256][ T6711] dump_stack_lvl+0x188/0x250 [ 373.054002][ T6711] ? show_regs_print_info+0x20/0x20 [ 373.059219][ T6711] ? load_image+0x410/0x410 [ 373.063751][ T6711] ? __might_sleep+0xf0/0xf0 [ 373.068363][ T6711] ? __lock_acquire+0x7b50/0x7b50 [ 373.073416][ T6711] should_fail+0x383/0x4b0 [ 373.077861][ T6711] should_failslab+0x5/0x20 [ 373.082383][ T6711] slab_pre_alloc_hook+0x51/0xc0 [ 373.087345][ T6711] ? __kernfs_new_node+0xe3/0x6b0 [ 373.092471][ T6711] kmem_cache_alloc+0x3d/0x280 [ 373.097262][ T6711] __kernfs_new_node+0xe3/0x6b0 [ 373.102139][ T6711] ? kernfs_new_node+0x250/0x250 [ 373.107105][ T6711] ? kernfs_create_dir_ns+0x10e/0x120 [ 373.112500][ T6711] ? sysfs_create_dir_ns+0x12c/0x290 [ 373.117814][ T6711] kernfs_new_node+0x148/0x250 [ 373.122604][ T6711] __kernfs_create_file+0x47/0x2e0 [ 373.127737][ T6711] sysfs_add_file_mode_ns+0x2d2/0x390 [ 373.133135][ T6711] sysfs_create_file_ns+0x12a/0x1b0 [ 373.138363][ T6711] ? sysfs_add_file_mode_ns+0x390/0x390 [ 373.143935][ T6711] ? __dev_fwnode+0x4c/0x80 [ 373.148548][ T6711] device_add+0x554/0x1050 [ 373.153183][ T6711] netdev_register_kobject+0x184/0x320 [ 373.158738][ T6711] register_netdevice+0x10e8/0x1720 [ 373.164065][ T6711] ? netif_stacked_transfer_operstate+0x200/0x200 [ 373.170518][ T6711] ? geneve_configure+0x51a/0xa70 [ 373.175641][ T6711] geneve_configure+0x605/0xa70 [ 373.180526][ T6711] geneve_newlink+0x103/0x1a0 [ 373.185320][ T6711] ? geneve_validate+0x540/0x540 [ 373.190286][ T6711] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 373.195261][ T6711] ? rtnl_create_link+0x85f/0xa90 [ 373.200311][ T6711] ? geneve_validate+0x540/0x540 [ 373.205276][ T6711] rtnl_newlink+0x139e/0x1920 [ 373.209994][ T6711] ? rtnl_setlink+0x500/0x500 [ 373.214702][ T6711] ? mark_lock+0x94/0x320 [ 373.219072][ T6711] ? __lock_acquire+0x13dc/0x7b50 [ 373.224174][ T6711] ? __lock_acquire+0x1305/0x7b50 [ 373.229284][ T6711] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 373.234522][ T6711] ? rtnl_setlink+0x500/0x500 [ 373.239223][ T6711] rtnetlink_rcv_msg+0x7f1/0xf10 [ 373.244190][ T6711] ? lock_chain_count+0x20/0x20 [ 373.249065][ T6711] ? rtnetlink_bind+0x80/0x80 [ 373.253773][ T6711] ? __local_bh_enable_ip+0x136/0x1c0 [ 373.259215][ T6711] ? lockdep_hardirqs_on+0x94/0x140 [ 373.264570][ T6711] ? __local_bh_enable_ip+0x136/0x1c0 [ 373.269966][ T6711] ? _local_bh_enable+0xa0/0xa0 [ 373.274855][ T6711] ? __dev_queue_xmit+0x1b64/0x2e50 [ 373.280091][ T6711] ? dev_queue_xmit+0x20/0x20 [ 373.284799][ T6711] ? memcpy+0x3c/0x60 [ 373.288819][ T6711] ? __copy_skb_header+0x3ba/0x4f0 [ 373.294013][ T6711] netlink_rcv_skb+0x1e9/0x430 [ 373.298882][ T6711] ? rtnetlink_bind+0x80/0x80 [ 373.303582][ T6711] ? netlink_ack+0xb10/0xb10 [ 373.308215][ T6711] netlink_unicast+0x78f/0x940 [ 373.313018][ T6711] netlink_sendmsg+0x8ba/0xbe0 [ 373.317813][ T6711] ? netlink_getsockopt+0x570/0x570 [ 373.323025][ T6711] ? aa_sock_msg_perm+0x94/0x150 [ 373.328041][ T6711] ? apparmor_socket_sendmsg+0x88/0x230 [ 373.333611][ T6711] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 373.338997][ T6711] ? security_socket_sendmsg+0x7c/0xa0 [ 373.344481][ T6711] ? netlink_getsockopt+0x570/0x570 [ 373.349702][ T6711] ____sys_sendmsg+0x5be/0x8f0 [ 373.354544][ T6711] ? __sys_sendmsg_sock+0x30/0x30 [ 373.359601][ T6711] ? import_iovec+0x6f/0xa0 [ 373.364148][ T6711] ___sys_sendmsg+0x236/0x2e0 [ 373.368856][ T6711] ? __sys_sendmsg+0x290/0x290 [ 373.373687][ T6711] __se_sys_sendmsg+0x1b7/0x2a0 [ 373.378561][ T6711] ? __x64_sys_sendmsg+0x80/0x80 [ 373.383518][ T6711] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 373.389538][ T6711] ? lockdep_hardirqs_on+0x94/0x140 [ 373.394763][ T6711] do_syscall_64+0x4c/0xa0 [ 373.399200][ T6711] ? clear_bhb_loop+0x30/0x80 [ 373.403892][ T6711] ? clear_bhb_loop+0x30/0x80 [ 373.408796][ T6711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 373.414852][ T6711] RIP: 0033:0x7ffaf333b159 [ 373.419306][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.439050][ T6711] RSP: 002b:00007ffaf1593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.447506][ T6711] RAX: ffffffffffffffda RBX: 00007ffaf35c2fa0 RCX: 00007ffaf333b159 [ 373.455499][ T6711] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000004 [ 373.463486][ T6711] RBP: 00007ffaf33d206b R08: 0000000000000000 R09: 0000000000000000 [ 373.471482][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.479496][ T6711] R13: 00007ffaf35c3038 R14: 00007ffaf35c2fa0 R15: 00007ffd0dd2a1b8 [ 373.487515][ T6711] [ 373.676406][ T6718] ================================================================== [ 373.676527][ T6718] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 373.676649][ T6718] Write of size 4 at addr ffffc90004501000 by task syz.7.642/6718 [ 373.676668][ T6718] [ 373.676702][ T6718] CPU: 0 PID: 6718 Comm: syz.7.642 Not tainted syzkaller #0 [ 373.676746][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 373.676759][ T6718] Call Trace: [ 373.676767][ T6718] [ 373.676777][ T6718] dump_stack_lvl+0x188/0x250 [ 373.676805][ T6718] ? show_regs_print_info+0x20/0x20 [ 373.676830][ T6718] ? load_image+0x410/0x410 [ 373.676847][ T6718] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 373.676880][ T6718] print_address_description+0x60/0x2d0 [ 373.676904][ T6718] ? sys_imageblit+0x1ba8/0x25d0 [ 373.676925][ T6718] kasan_report+0xdf/0x130 [ 373.676950][ T6718] ? sys_imageblit+0x1ba8/0x25d0 [ 373.676978][ T6718] sys_imageblit+0x1ba8/0x25d0 [ 373.677029][ T6718] ? sys_copyarea+0x2530/0x2530 [ 373.677049][ T6718] ? __lock_acquire+0x13dc/0x7b50 [ 373.677081][ T6718] ? verify_lock_unused+0x140/0x140 [ 373.677106][ T6718] ? __up_console_sem+0x15f/0x1a0 [ 373.677132][ T6718] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 373.677185][ T6718] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 373.677212][ T6718] soft_cursor+0x9fd/0xc30 [ 373.677245][ T6718] bit_cursor+0x16b5/0x1f40 [ 373.677291][ T6718] ? bit_clear_margins+0x550/0x550 [ 373.677323][ T6718] ? get_color+0x2d8/0x440 [ 373.677342][ T6718] ? bit_clear_margins+0x550/0x550 [ 373.677365][ T6718] ? fbcon_cursor+0x396/0x570 [ 373.677385][ T6718] ? add_softcursor+0x8c/0x440 [ 373.677425][ T6718] con_flush_chars+0x1f6/0x270 [ 373.677450][ T6718] con_write+0x29/0x40 [ 373.677473][ T6718] do_output_char+0x58a/0x960 [ 373.677531][ T6718] ? mutex_lock_io_nested+0x60/0x60 [ 373.677554][ T6718] __process_echoes+0x2a2/0x8f0 [ 373.677592][ T6718] n_tty_receive_buf_common+0x5edd/0x65b0 [ 373.677683][ T6718] paste_selection+0x351/0x4e0 [ 373.677709][ T6718] ? set_selection_kernel+0x17a0/0x17a0 [ 373.677731][ T6718] ? sched_dynamic_update+0x210/0x210 [ 373.677784][ T6718] ? __might_fault+0xb3/0x110 [ 373.677828][ T6718] ? tioclinux+0x222/0x3e0 [ 373.677854][ T6718] vt_ioctl+0x441/0x1ca0 [ 373.677885][ T6718] ? __vt_event_wait+0x260/0x260 [ 373.677931][ T6718] ? tty_jobctrl_ioctl+0x164/0xae0 [ 373.677959][ T6718] tty_ioctl+0x848/0xc30 [ 373.677981][ T6718] ? security_file_ioctl+0x7c/0xa0 [ 373.678011][ T6718] ? tty_get_icount+0xa0/0xa0 [ 373.678033][ T6718] __se_sys_ioctl+0xfa/0x170 [ 373.678057][ T6718] do_syscall_64+0x4c/0xa0 [ 373.678077][ T6718] ? clear_bhb_loop+0x30/0x80 [ 373.678096][ T6718] ? clear_bhb_loop+0x30/0x80 [ 373.678119][ T6718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 373.678141][ T6718] RIP: 0033:0x7f4d320cd159 [ 373.678161][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.678179][ T6718] RSP: 002b:00007f4d30304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.678205][ T6718] RAX: ffffffffffffffda RBX: 00007f4d32355090 RCX: 00007f4d320cd159 [ 373.678222][ T6718] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000007 [ 373.678236][ T6718] RBP: 00007f4d3216406b R08: 0000000000000000 R09: 0000000000000000 [ 373.678250][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.678263][ T6718] R13: 00007f4d32355128 R14: 00007f4d32355090 R15: 00007fffd77587d8 [ 373.678298][ T6718] [ 373.678306][ T6718] [ 373.678311][ T6718] [ 373.678315][ T6718] Memory state around the buggy address: [ 373.678350][ T6718] ffffc90004500f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.678364][ T6718] ffffc90004500f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.678378][ T6718] >ffffc90004501000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 373.678389][ T6718] ^ [ 373.678399][ T6718] ffffc90004501080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 373.678413][ T6718] ffffc90004501100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 373.678424][ T6718] ================================================================== [ 373.678432][ T6718] Disabling lock debugging due to kernel taint [ 373.694857][ T6718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 373.694874][ T6718] CPU: 0 PID: 6718 Comm: syz.7.642 Tainted: G B syzkaller #0 [ 373.694896][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 373.694906][ T6718] Call Trace: [ 373.694913][ T6718] [ 373.694921][ T6718] dump_stack_lvl+0x188/0x250 [ 373.694947][ T6718] ? show_regs_print_info+0x20/0x20 [ 373.694965][ T6718] ? load_image+0x410/0x410 [ 373.694987][ T6718] panic+0x2f8/0x850 [ 373.695128][ T6718] ? bpf_jit_dump+0xd0/0xd0 [ 373.695151][ T6718] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 373.695171][ T6718] ? _raw_spin_unlock+0x40/0x40 [ 373.695190][ T6718] ? sys_imageblit+0x1ba8/0x25d0 [ 373.695211][ T6718] check_panic_on_warn+0x80/0xa0 [ 373.695257][ T6718] ? sys_imageblit+0x1ba8/0x25d0 [ 373.695277][ T6718] end_report+0x6d/0xf0 [ 373.695299][ T6718] kasan_report+0x102/0x130 [ 373.695320][ T6718] ? sys_imageblit+0x1ba8/0x25d0 [ 373.695341][ T6718] sys_imageblit+0x1ba8/0x25d0 [ 373.695366][ T6718] ? sys_copyarea+0x2530/0x2530 [ 373.695385][ T6718] ? __lock_acquire+0x13dc/0x7b50 [ 373.695408][ T6718] ? verify_lock_unused+0x140/0x140 [ 373.695429][ T6718] ? __up_console_sem+0x15f/0x1a0 [ 373.695450][ T6718] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 373.695469][ T6718] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 373.695489][ T6718] soft_cursor+0x9fd/0xc30 [ 373.695511][ T6718] bit_cursor+0x16b5/0x1f40 [ 373.695536][ T6718] ? bit_clear_margins+0x550/0x550 [ 373.695558][ T6718] ? get_color+0x2d8/0x440 [ 373.695574][ T6718] ? bit_clear_margins+0x550/0x550 [ 373.695592][ T6718] ? fbcon_cursor+0x396/0x570 [ 373.695609][ T6718] ? add_softcursor+0x8c/0x440 [ 373.695629][ T6718] con_flush_chars+0x1f6/0x270 [ 373.695650][ T6718] con_write+0x29/0x40 [ 373.695669][ T6718] do_output_char+0x58a/0x960 [ 373.695694][ T6718] ? mutex_lock_io_nested+0x60/0x60 [ 373.695712][ T6718] __process_echoes+0x2a2/0x8f0 [ 373.695737][ T6718] n_tty_receive_buf_common+0x5edd/0x65b0 [ 373.695778][ T6718] paste_selection+0x351/0x4e0 [ 373.695798][ T6718] ? set_selection_kernel+0x17a0/0x17a0 [ 373.695816][ T6718] ? sched_dynamic_update+0x210/0x210 [ 373.695838][ T6718] ? __might_fault+0xb3/0x110 [ 373.695857][ T6718] ? tioclinux+0x222/0x3e0 [ 373.695877][ T6718] vt_ioctl+0x441/0x1ca0 [ 373.695899][ T6718] ? __vt_event_wait+0x260/0x260 [ 373.695925][ T6718] ? tty_jobctrl_ioctl+0x164/0xae0 [ 373.695947][ T6718] tty_ioctl+0x848/0xc30 [ 373.695965][ T6718] ? security_file_ioctl+0x7c/0xa0 [ 373.695984][ T6718] ? tty_get_icount+0xa0/0xa0 [ 373.696011][ T6718] __se_sys_ioctl+0xfa/0x170 [ 373.696029][ T6718] do_syscall_64+0x4c/0xa0 [ 373.696047][ T6718] ? clear_bhb_loop+0x30/0x80 [ 373.696066][ T6718] ? clear_bhb_loop+0x30/0x80 [ 373.696084][ T6718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 373.696105][ T6718] RIP: 0033:0x7f4d320cd159 [ 373.696121][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.696138][ T6718] RSP: 002b:00007f4d30304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.696161][ T6718] RAX: ffffffffffffffda RBX: 00007f4d32355090 RCX: 00007f4d320cd159 [ 373.696176][ T6718] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000007 [ 373.696189][ T6718] RBP: 00007f4d3216406b R08: 0000000000000000 R09: 0000000000000000 [ 373.696202][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.696214][ T6718] R13: 00007f4d32355128 R14: 00007f4d32355090 R15: 00007fffd77587d8 [ 373.696234][ T6718] [ 373.696437][ T6718] Kernel Offset: disabled [ 374.453183][ T6718] Rebooting in 86400 seconds..